• Home
  • About
  • Services
  • Contact

Privacy Policy

Last Updated: October 15, 2025

Ithaka Wellness Center ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website ithakawellness.com and when you use our services.

Please read this Privacy Policy carefully. By accessing or using our website and services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the website or use our services.

1. Information We Collect

1.1 Personal Information

We may collect personal information that you voluntarily provide to us when you:

  • Schedule an appointment or consultation
  • Contact us via email or phone
  • Subscribe to our newsletter or communications
  • Complete forms on our website
  • Register as a patient

This personal information may include:

  • Name and contact information (email address, phone number, mailing address)
  • Date of birth
  • Health information and medical history
  • Insurance information
  • Payment information
  • Any other information you choose to provide

1.2 Health Information

As a healthcare provider, we collect and maintain health information that is subject to the Health Insurance Portability and Accountability Act (HIPAA). Our use and disclosure of your protected health information (PHI) is governed by our Notice of Privacy Practices, which is provided to you separately and is available upon request.

1.3 Automatically Collected Information

When you visit our website, we may automatically collect certain information about your device and browsing activity, including:

  • IP address
  • Browser type and version
  • Operating system
  • Pages visited and time spent on pages
  • Referring website addresses
  • Date and time of visits

2. How We Use Your Information

We use the information we collect for the following purposes:

  • To Provide Healthcare Services: To deliver functional medicine consultations, treatments, and health coaching services
  • To Communicate: To respond to inquiries, send appointment reminders, and provide important updates about your care
  • To Process Payments: To process transactions and send billing information
  • To Improve Our Services: To understand how our website is used and improve user experience
  • To Comply with Legal Obligations: To comply with applicable laws, regulations, and legal processes
  • To Protect Rights and Safety: To protect the rights, property, and safety of Ithaka Wellness Center, our patients, and others

3. How We Share Your Information

3.1 HIPAA-Protected Health Information

Your protected health information is subject to strict confidentiality requirements under HIPAA. We will only use or disclose your health information as permitted by law and as described in our Notice of Privacy Practices.

3.2 Service Providers

We may share your information with third-party service providers who perform services on our behalf, such as:

  • Laboratory testing services
  • Payment processing services
  • Electronic health record systems
  • Email and communication services
  • IT and security services

These service providers are contractually obligated to protect your information and may only use it for the purposes we specify.

3.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas, or government agencies).

3.4 Business Transfers

If Ithaka Wellness Center is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and the choices you may have regarding your information.

4. Data Security

We implement appropriate technical and organizational security measures to protect your personal information and health information against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of sensitive data in transit and at rest
  • Regular security assessments and audits
  • Access controls and authentication procedures
  • Employee training on privacy and security practices
  • Physical security of facilities and equipment

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

5. Data Retention

We retain your personal information and health information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Medical records are typically retained for a minimum of seven years from the date of last service, or longer as required by applicable laws and regulations.

6. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information, including:

  • Access: The right to request access to your personal information
  • Correction: The right to request correction of inaccurate information
  • Deletion: The right to request deletion of your information (subject to legal and regulatory requirements)
  • Restriction: The right to request restriction of processing of your information
  • Portability: The right to receive a copy of your information in a structured format
  • Objection: The right to object to certain processing of your information

For health information specifically protected by HIPAA, you have additional rights as described in our Notice of Privacy Practices.

To exercise any of these rights, please contact us using the information provided below.

7. Cookies and Tracking Technologies

Our website may use cookies and similar tracking technologies to enhance user experience and analyze website traffic. Cookies are small data files stored on your device. You can control cookies through your browser settings and may choose to disable them, although this may affect your ability to use certain features of our website.

8. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child without parental consent, we will take steps to delete that information.

10. California Privacy Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your information (with certain exceptions), and the right to opt-out of the sale of your information. We do not sell personal information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated Privacy Policy on our website with a new "Last Updated" date. We encourage you to review this Privacy Policy periodically.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Ithaka Wellness Center
Email: paul@ithakawellness.com

13. HIPAA Notice

For information about how we use and disclose your protected health information under HIPAA, please refer to our Notice of Privacy Practices, which is available separately.

By using our website and services, you acknowledge that you have read and understood this Privacy Policy.

Ithaka Wellness Center

Privacy Policy Terms of Service Disclaimer HIPAA Notice

© 2025 Ithaka Wellness Center. All rights reserved.